docker run -d --name logstash \
  -p 5044:5044 \
  -e LS_JAVA_OPTS="-Xms512m -Xmx512m" \
  docker.io/elastic/logstash:8.12.0

docker run -d --name logstash \
  --restart unless-stopped \
  -p 5044:5044 -p 9600:9600 \
  -v /data/logstash/pipeline:/usr/share/logstash/pipeline \
  -v /data/logstash/data:/usr/share/logstash/data \
  -e LS_JAVA_OPTS="-Xms1g -Xmx1g" \
  -e ELASTICSEARCH_HOSTS=http://elasticsearch:9200 \
  docker.io/elastic/logstash:8.12.0

apiVersion: apps/v1
kind: Deployment
metadata:
  name: logstash
spec:
  replicas: 2
  selector:
    matchLabels:
      app: logstash
  template:
    metadata:
      labels:
        app: logstash
    spec:
      containers:
        - name: logstash
          image: docker.io/elastic/logstash:8.12.0
          ports:
            - containerPort: 5044
          env:
            - name: LS_JAVA_OPTS
              value: "-Xms1g -Xmx1g"
          volumeMounts:
            - name: pipeline
              mountPath: /usr/share/logstash/pipeline
      volumes:
        - name: pipeline
          configMap:
            name: logstash-pipeline
---
apiVersion: v1
kind: Service
metadata:
  name: logstash
spec:
  selector:
    app: logstash
  ports:
    - port: 5044
      targetPort: 5044